CVE-2020-7787— Improper Authentication
Quick assessment
Affected
n/a react-adal
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Salvoravida React-adal是Salvoravida个人开发者的一款基于JS语言的用于与Azure Active Directory交互的代码库。 react-adal 存在授权问题漏洞，该漏洞源于对于特殊设计的JWT令牌和请求URL，可能会导致nonce、会话和刷新值验证不正确，从而导致应用程序将攻击者可利用该漏洞生成的JWT令牌视为真实的。该逻辑缺陷是由nonce、会话和刷新值存储在浏览器本地存储或会话存储中的方式造成的。每个键被自动附加到
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-7787
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper Authentication
Source: CVE Program / CVE List V5
Vulnerability Description
This affects all versions of package react-adal. It is possible for a specially crafted JWT token and request URL can cause the nonce, session and refresh values to be incorrectly validated, causing the application to treat an attacker-generated JWT token as authentic. The logical defect is caused by how the nonce, session and refresh values are stored in the browser local storage or session storage. Each key is automatically appended by ||. When the received nonce and session keys are generated, the list of values is stored in the browser storage, separated by ||, with || always appended to the end of the list. Since || will always be the last 2 characters of the stored values, an empty string ("") will always be in the list of the valid values. Therefore, if an empty session parameter is provided in the callback URL, and a specially-crafted JWT token contains an nonce value of "" (empty string), then adal.js will consider the JWT token as authentic.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Salvoravida React-adal 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Salvoravida React-adal是Salvoravida个人开发者的一款基于JS语言的用于与Azure Active Directory交互的代码库。 react-adal 存在授权问题漏洞，该漏洞源于对于特殊设计的JWT令牌和请求URL，可能会导致nonce、会话和刷新值验证不正确，从而导致应用程序将攻击者可利用该漏洞生成的JWT令牌视为真实的。该逻辑缺陷是由nonce、会话和刷新值存储在浏览器本地存储或会话存储中的方式造成的。每个键被自动附加到||中。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | react-adal | 0 ~ unspecified | - |
|
II. Public POCs for CVE-2020-7787
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-7787
请登录查看更多情报信息。
Patches & Fixes for CVE-2020-7787 (1)
-
https://github.com/salvoravida/react-adal/pull/115 x_refsource_MISC
Vendor Advisories for CVE-2020-7787 (1)
-
https://snyk.io/vuln/SNYK-JS-REACTADAL-1018907 x_refsource_MISC
Same Patch Batch · n/a · 2020-12-09 · 27 CVEs total
| CVE-2020-7776 | 7.1 HIGH | Cross-site Scripting (XSS) |
| CVE-2020-29661 | Linux kernel 资源管理错误漏洞 | |
| CVE-2020-29259 | SourceCodester Online Examination System 跨站脚本漏洞 | |
| CVE-2020-29258 | SourceCodester Online Examination System 跨站脚本漏洞 | |
| CVE-2020-29257 | SourceCodester Online Examination System 跨站脚本漏洞 | |
| CVE-2020-16600 | Artifex Software MuPDF 资源管理错误漏洞 | |
| CVE-2020-16599 | GNU Binutils 代码问题漏洞 | |
| CVE-2020-16593 | GNU Binutils 代码问题漏洞 | |
| CVE-2020-16592 | GNU Binutils 资源管理错误漏洞 | |
| CVE-2020-16591 | GNU Binutils 缓冲区错误漏洞 | |
| CVE-2020-16590 | GNU Binutils 资源管理错误漏洞 | |
| CVE-2020-25499 | TotoLink A3002RU 命令注入漏洞 | |
| CVE-2020-28086 | Git 授权问题漏洞 | |
| CVE-2020-29660 | Linux kernel 资源管理错误漏洞 | |
| CVE-2020-16587 | Industrial Light And Magic OpenEXR 缓冲区错误漏洞 | |
| CVE-2020-29659 | Flexense DupScout Enterprise 缓冲区错误漏洞 | |
| CVE-2020-25199 | Wecon Technologies LeviStudioU 缓冲区错误漏洞 | |
| CVE-2020-23520 | Imcat 代码问题漏洞 | |
| CVE-2020-29657 | JerryScript 缓冲区错误漏洞 | |
| CVE-2020-29655 | ASUS RT-AC88U 注入漏洞 |
Showing top 20 of 27 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2020-7787
No comments yet